diff --git a/.github/workflows/autobuild.yml b/.github/workflows/autobuild.yml
index 1d7bd5852a..7a3bb671f0 100644
--- a/.github/workflows/autobuild.yml
+++ b/.github/workflows/autobuild.yml
@@ -127,7 +127,8 @@ jobs:
             # Stay on 10.15 as long as we use dmgbuild which does not work with 11's hdiutil (?):
             building_on_os:         macos-10.15
             base_command:           QT_VERSION=5.15.2 SIGN_IF_POSSIBLE=1 ./.github/autobuild/mac.sh
-            run_codeql:             true
+            # Disable CodeQL on mac as it interferes with signing the binaries
+            run_codeql:             false
             xcode_version:          12.1.1
 
           - config_name:            MacOS Legacy (artifacts)
diff --git a/Jamulus.entitlements b/Jamulus.entitlements
index 9f3c0e8c3c..6a3a486a6f 100644
--- a/Jamulus.entitlements
+++ b/Jamulus.entitlements
@@ -10,5 +10,7 @@
 	<true/>
 	<key>com.apple.security.network.server</key>
 	<true/>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
 </dict>
 </plist>